Description
Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via long strings that contain '@' characters in the (1) USER and (2) APOP commands.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Alt-N MDaemon POP3 Server < 9.06 - 'USER' Remote Heap Overflow EDB-2258 · remote · Aug 26, 2006 · verified
- MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC) EDB-2245 · dos · Aug 22, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 2245 exploit
- 1016729 vdb-entry
- ADV-2006-3361 vdb-entry
- http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-08-04
- mdaemon-pop3-bo(28517) vdb-entry
- 20060822 MDaemon POP3 server remote buffer overflow (preauth) mailing-list
- 1446 third-party-advisory
- 19651 vdb-entry
- http://files.altn.com/MDaemon/Release/RelNotes_en.txt
- 21595 third-party-advisory
- 28125 vdb-entry